This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48605.roa File: AS48605.roa (raw, json) Hash identifier: r2x/N/gN6a/V75KU5Epf/AtX7UTmr3OnnmGbdOY4SlA= Subject key identifier: 8F:23:E7:3B:8F:E3:0A:F3:66:60:C0:D7:B0:DB:78:B1:D9:76:9B:81 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 5801C92D5C00106402527F7728B042D29328FE8B Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48605.roa Signing time: Thu 01 Jan 2026 15:55:33 +0000 ROA not before: Thu 01 Jan 2026 15:50:33 +0000 ROA not after: Thu 31 Dec 2026 15:55:33 +0000 asID: 48605 IP address blocks: 181.215.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:01:c9:2d:5c:00:10:64:02:52:7f:77:28:b0:42:d2:93:28:fe:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 1 15:50:33 2026 GMT Not After : Dec 31 15:55:33 2026 GMT Subject: CN=8F23E73B8FE30AF36660C0D7B0DB78B1D9769B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:8a:e1:bd:8b:d3:6f:40:20:35:f3:2d:11: 75:fa:31:0c:b4:c1:25:08:ff:96:da:99:e0:83:0b: 7b:b1:15:a9:d5:5b:d2:81:4c:4d:64:c5:46:d8:95: b0:2c:76:71:3b:90:92:4a:13:c4:3c:df:47:0e:ce: 6f:30:96:29:ab:12:c0:a7:b0:6b:60:72:90:00:92: 17:6e:02:e4:ad:79:68:83:3f:a8:6b:49:dd:da:70: d3:c1:a8:d0:67:a5:bf:2a:12:17:f6:ec:60:24:ab: 1a:85:4c:6b:b9:f8:0f:ad:03:4f:20:e1:65:38:48: 03:c2:65:04:08:e8:1c:4a:5d:7d:cc:48:66:db:eb: 94:90:31:4f:b3:b1:e8:7e:fd:da:42:36:92:b5:45: 57:12:25:34:ad:e3:81:fa:bf:53:50:71:64:2b:16: 60:01:fd:77:38:57:2c:78:cf:4c:2e:41:0c:2d:f3: 41:da:1d:f2:88:85:5d:59:11:06:fa:5a:98:ce:bc: 61:62:3f:db:c3:79:3b:ca:0d:f5:b0:f1:97:00:a4: 0d:cc:9b:9f:f3:1a:d7:fa:37:77:a9:42:da:34:6d: 1a:08:86:a3:6f:79:e2:2e:1e:b7:e9:8c:a9:9c:3b: 64:bc:3e:87:43:04:a3:ab:b7:46:10:88:7f:08:15: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:E7:3B:8F:E3:0A:F3:66:60:C0:D7:B0:DB:78:B1:D9:76:9B:81 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.32.0/24 Signature Algorithm: sha256WithRSAEncryption 50:14:4f:da:78:c1:38:92:be:45:0e:3d:c3:f2:36:35:cf:ab: fb:36:b5:04:7d:45:c8:42:17:b9:fc:dd:29:dc:b9:63:d3:80: f0:36:12:ab:3e:7e:b7:35:f3:ac:c2:37:b9:02:c7:ba:02:75: f8:10:c1:6c:8d:af:c4:1b:f6:1f:f6:b1:86:84:c2:1f:a6:11: fe:43:ed:99:51:5d:bc:c1:b0:55:3f:30:bf:b5:89:ef:7c:80: 85:4a:ed:5c:8b:a6:ff:9f:04:c0:a1:f4:6e:07:07:eb:85:e0: 02:3a:d5:03:b6:a9:97:82:97:1c:0c:36:ff:8d:53:06:18:dc: ab:df:7f:a8:6f:52:15:98:cf:d8:f1:1a:18:4a:84:13:88:db: 2d:1f:ce:2b:2b:89:69:76:88:12:95:d0:ac:7d:4b:ed:18:d1: 45:0b:c2:e9:69:f9:ea:67:4e:b5:6d:c9:aa:31:d3:07:03:32: 1f:9e:bc:4e:3b:aa:15:6c:d7:ef:5f:2c:f4:8f:24:69:db:99: 9b:31:64:4c:6c:2a:4b:12:e7:c4:3a:fd:50:dc:55:4c:59:4b: 41:46:10:c0:78:e0:c4:fc:9a:72:e0:60:72:69:d7:1f:ab:d8: 77:c1:4b:92:a8:28:d4:2a:c0:ff:26:69:9f:bf:ac:6c:eb:31: 1e:ae:05:e3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUWAHJLVwAEGQCUn93KLBC0pMo/oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMDExNTUwMzNaFw0yNjEyMzExNTU1MzNaMDMxMTAvBgNV BAMTKDhGMjNFNzNCOEZFMzBBRjM2NjYwQzBEN0IwREI3OEIxRDk3NjlCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYy4rhvYvTb0AgNfMtEXX6MQy0 wSUI/5bameCDC3uxFanVW9KBTE1kxUbYlbAsdnE7kJJKE8Q830cOzm8wlimrEsCn sGtgcpAAkhduAuSteWiDP6hrSd3acNPBqNBnpb8qEhf27GAkqxqFTGu5+A+tA08g 4WU4SAPCZQQI6BxKXX3MSGbb65SQMU+zseh+/dpCNpK1RVcSJTSt44H6v1NQcWQr FmAB/Xc4Vyx4z0wuQQwt80HaHfKIhV1ZEQb6WpjOvGFiP9vDeTvKDfWw8ZcApA3M m5/zGtf6N3epQto0bRoIhqNveeIuHrfpjKmcO2S8PodDBKOrt0YQiH8IFfiRAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUjyPnO4/jCvNmYMDXsNt4sdl2m4EwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDg2MDUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11yAw DQYJKoZIhvcNAQELBQADggEBAFAUT9p4wTiSvkUOPcPyNjXPq/s2tQR9RchCF7n8 3SncuWPTgPA2Eqs+frc186zCN7kCx7oCdfgQwWyNr8Qb9h/2sYaEwh+mEf5D7ZlR XbzBsFU/ML+1ie98gIVK7VyLpv+fBMCh9G4HB+uF4AI61QO2qZeClxwMNv+NUwYY 3Kvff6hvUhWYz9jxGhhKhBOI2y0fzisriWl2iBKV0Kx9S+0Y0UULwulp+epnTrVt yaox0wcDMh+evE47qhVs1+9fLPSPJGnbmZsxZExsKksS58Q6/VDcVUxZS0FGEMB4 4MT8mnLgYHJp1x+r2HfBS5KoKNQqwP8maZ+/rGzrMR6uBeM= -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:32 2026 by rpki-client